Rafal Dziwinski

<p>This plugin checks if your WordPress installation is secure. It checks basic rules, inspired by Wazuh policies.<br />
If there is any red light, your WordPress installation is insecure.<br />
If all lights are green, you can’t be 100% sure that your website is impossible to hack, but it will be really, really hard.</p>
<h3>External services</h3>
<p>This plugin uses the php.net website to get a list of supported PHP versions.</p>


WPEye

Oliver Campion

<h4>Block Access to wp-login.php</h4>
<p>This plugin does the following:</p>
<ul>
<li>Locates wp-login.php in your WordPress installation and duplicates it</li>
<li>Locates .htaccess and inserts lines to block the default wp-login.php and creates a new secret address to use for legitimate login</li>
<li>Will email the site admin if an administrator signs in with an un-recognised IP address</li>
</ul>
<p>When installed your server will return “403 Forbidden“ when attempts are made to access the default wp-login.php file. This has two benefits; it prevents hackers from using brute force methods to hack your website and it reduces the load on the server when such brute force attacks are launched on your site as WordPress isn’t run at all.</p>
<p>Please note, this plugin uses .htaccess so is only compatible with Apache web servers, it is not compatible with Nginx web servers.</p>


Block wp-login

This plugin completely blocks access to wp-login.php and creates a new secret login URL

WPEye vs Block wp-login